Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/j-zPWM7EGH53W5j-G62S3G1Y1Rs.roa
File: j-zPWM7EGH53W5j-G62S3G1Y1Rs.roa (raw, json)
Hash identifier: ITpjBzLuMQgCW6gTulI7o8fax/QyVdn7xy1NOAviNaI=
Subject key identifier: 8F:EC:CF:58:CE:C4:18:7E:77:5B:98:FE:1B:AD:92:DC:6D:58:D5:1B
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019FFA00A0356B42C822CDCC717EF8ECD0FC
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/j-zPWM7EGH53W5j-G62S3G1Y1Rs.roa
Signing time: Thu 13 Aug 2026 07:22:52 +0000
ROA not before: Thu 13 Aug 2026 07:22:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 77.93.137.0/24 maxlen: 24
77.93.149.0/24 maxlen: 24
82.153.117.0/24 maxlen: 24
82.153.127.0/24 maxlen: 24
82.153.208.0/22 maxlen: 22
82.163.19.0/24 maxlen: 24
89.213.58.0/24 maxlen: 24
89.213.228.0/24 maxlen: 24
213.210.16.0/24 maxlen: 24
213.210.18.0/24 maxlen: 24
213.210.33.0/24 maxlen: 24
213.210.51.0/24 maxlen: 24
213.218.220.0/24 maxlen: 24
217.144.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fa:00:a0:35:6b:42:c8:22:cd:cc:71:7e:f8:ec:d0:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 13 07:22:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8feccf58cec4187e775b98fe1bad92dc6d58d51b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:76:65:3b:43:bb:00:8e:46:b0:27:f7:d8:20:
22:68:a0:84:63:72:7f:18:e8:c8:35:89:3b:01:4f:
e4:a0:e5:12:cd:ca:e8:fc:74:ae:ef:95:cb:f3:60:
2a:be:8b:ba:fe:20:d7:f4:75:0f:2d:d0:88:73:ae:
6b:35:2f:32:70:15:7e:b8:ac:89:7e:1d:56:85:d1:
7f:1f:21:7f:74:05:6a:ea:d4:dc:ec:2b:20:a9:ed:
d2:a3:0b:08:33:26:f0:4e:ca:6c:d7:81:69:18:77:
02:d4:4a:34:16:a5:91:09:cd:59:6d:89:ca:27:68:
df:30:6c:af:4f:66:d9:47:64:01:48:88:6e:ef:94:
59:aa:6e:05:e5:36:b4:37:bb:5d:13:ec:e5:40:03:
28:72:38:03:d0:dc:d5:72:33:98:af:53:d9:1f:ae:
b9:ad:51:9b:6c:a7:f0:9d:28:25:92:ba:5d:a1:a6:
60:d3:e9:55:63:83:25:8b:60:77:89:6b:e4:35:ed:
ae:16:53:87:46:d8:f8:f0:48:b9:6b:ee:ae:57:7c:
8b:0a:60:de:f7:a3:d1:fc:91:c9:c6:6c:cb:b2:c5:
6d:55:7a:b1:d2:d8:17:e4:0d:72:3c:8c:3e:9b:fd:
f6:70:03:94:f1:fc:c7:b1:3b:b4:3d:e5:af:ac:6f:
56:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:EC:CF:58:CE:C4:18:7E:77:5B:98:FE:1B:AD:92:DC:6D:58:D5:1B
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/j-zPWM7EGH53W5j-G62S3G1Y1Rs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.137.0/24
77.93.149.0/24
82.153.117.0/24
82.153.127.0/24
82.153.208.0/22
82.163.19.0/24
89.213.58.0/24
89.213.228.0/24
213.210.16.0/24
213.210.18.0/24
213.210.33.0/24
213.210.51.0/24
213.218.220.0/24
217.144.151.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:95:a8:36:89:ef:c8:48:a1:c1:c6:44:90:a1:c7:7c:da:81:
98:33:da:40:0d:3e:3a:b5:4c:90:3c:8a:ef:de:5d:38:ac:25:
97:38:c9:7c:bf:7b:83:9b:6e:93:12:1b:f6:ad:9a:9a:5c:1e:
3d:75:c2:0d:8d:02:16:03:e8:c6:07:f6:12:14:fd:5a:39:c8:
54:dd:c5:81:48:cc:64:76:14:cd:de:96:b1:49:b1:b9:1d:69:
1a:80:1c:df:f9:35:ba:84:5a:61:4e:0e:5f:70:e3:20:d8:3c:
67:20:26:ed:a3:d2:4f:0d:19:e5:50:01:6d:d9:4f:93:e8:bb:
1b:d2:4c:16:30:77:20:59:19:f2:65:e6:b1:80:93:7c:7b:7e:
7f:b2:00:00:f5:7d:92:e0:97:c7:89:fc:45:ea:80:dc:43:b7:
74:84:88:f3:10:f6:aa:11:2f:dd:cb:4e:d0:78:74:79:c2:9d:
30:e8:e4:91:1a:0d:85:32:1a:46:15:58:78:f6:13:6d:a8:5e:
b4:16:1f:24:5b:05:73:ff:c8:16:6a:6a:f4:cd:d2:de:1a:34:
b5:c9:28:e5:5e:08:19:b4:b0:f7:31:d0:bc:f8:ae:51:59:a9:
2f:74:ba:94:3b:2a:ae:b6:91:97:3a:cb:4a:74:75:8d:d0:5e:
0a:5f:0f:3c
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgISAZ/6AKA1a0LIIs3McX747ND8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNWI4YTJiMTA2ZDMzNGIwYzZjNjFlMTc3YWE2MmY0NGZl
MGUzYjYwHhcNMjYwODEzMDcyMjUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZmVjY2Y1OGNlYzQxODdlNzc1Yjk4ZmUxYmFkOTJkYzZkNThkNTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3ZlO0O7AI5GsCf32CAiaKCEY3J/
GOjINYk7AU/koOUSzcro/HSu75XL82Aqvou6/iDX9HUPLdCIc65rNS8ycBV+uKyJ
fh1WhdF/HyF/dAVq6tTc7Csgqe3SowsIMybwTsps14FpGHcC1Eo0FqWRCc1ZbYnK
J2jfMGyvT2bZR2QBSIhu75RZqm4F5Ta0N7tdE+zlQAMocjgD0NzVcjOYr1PZH665
rVGbbKfwnSglkrpdoaZg0+lVY4Mli2B3iWvkNe2uFlOHRtj48Ei5a+6uV3yLCmDe
96PR/JHJxmzLssVtVXqx0tgX5A1yPIw+m/32cAOU8fzHsTu0PeWvrG9WXQIDAQAB
o4ICVzCCAlMwHQYDVR0OBBYEFI/sz1jOxBh+d1uY/hutktxtWNUbMB8GA1UdIwQY
MBaAFL5biisQbTNLDGxh4XeqYvRP4OO2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvai16UFdNN0VHSDUzVzVqLUc2MlMzRzFZMVJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAATBUAwQATV2JAwQA
TV2VAwQAUpl1AwQAUpl/AwQCUpnQAwQAUqMTAwQAWdU6AwQAWdXkAwQA1dIQAwQA
1dISAwQA1dIhAwQA1dIzAwQA1drcAwQA2ZCXMA0GCSqGSIb3DQEBCwUAA4IBAQBL
lag2ie/ISKHBxkSQocd82oGYM9pADT46tUyQPIrv3l04rCWXOMl8v3uDm26TEhv2
rZqaXB49dcINjQIWA+jGB/YSFP1aOchU3cWBSMxkdhTN3paxSbG5HWkagBzf+TW6
hFphTg5fcOMg2DxnICbto9JPDRnlUAFt2U+T6Lsb0kwWMHcgWRnyZeaxgJN8e35/
sgAA9X2S4JfHifxF6oDcQ7d0hIjzEPaqES/dy07QeHR5wp0w6OSRGg2FMhpGFVh4
9hNtqF60Fh8kWwVz/8gWamr0zdLeGjS1ySjlXggZtLD3MdC8+K5RWakvdLqUOyqu
tpGXOstKdHWN0F4KXw88
-----END CERTIFICATE-----
Generated at Mon Aug 17 22:10:10 2026 by rpki-client